By michele654 on Thursday, 06 February 2025
Category: Vulnerabilities

New Vulnerabilities Thursday 06 February


F5 Quarterly Patches are out. New Alerts for Cisco, ABB (0-Day), IBM, and Dell.

F5 

Quarterly Patches include 17 bulletins, 13 rated High, 3 rated Medium, and 1 rated Low. Highest CVSSv4 score of 8.9
More info.

Cisco 

Cisco has published 8 bulletins, 1 rated Critical, 1 rated High, and 6 rated Medium. Highest CVSSv2 score of 9.9
More info.

ABB 0-Day

ASPECT Enterprise, NEXUS Series, and Matrix Series have a hard-coded credentials vulnerability that could allow a remote attacker to gain unauthorized access and affect confidentiality, integrity and availability. CVSSv4 score of 9.3
These devices are not supposed to be internet-facing. This has been publicly disclosed.
More info.

IBM 

IBM has published Critical bulletins for Asset Data Dictionary, Instana Observability, Security QRadar EDR, Cloud Pak for Business Automation iFixes, watsonx.data, Cloud Pak for Network Automation, QRadar Suite, Cloud Pak System, Engineering Lifecycle Optimization, Guardium Data Security Center, Security Verify Access, and Spectrum Protect Plus.
More info.

Dell 

Dell has published Critical bulletins for Data Protection Advisor, and Avamar. High bulletins have been published for CloudBoost Virtual Appliance, and NetWorker vProxy.
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details